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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to communication(s) filed on 09 April 2007 . 
2a)S This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) Kl Claim(s) 1-12 is/are pending in the application. 

4a) Of the above claim(s) . ■ is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 1-12 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2.D Certified copies of the priority documents have been received in Application No. . 

3-D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Claim Rejections - 35 USC § 112 

1 . The following is a quotation of the first paragraph of 35 U.S.C. 1 12: 

The specification shall contain a written description of the invention, and of the manner and process of making 
and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it 
pertains, or with which it is most nearly connected, to make and use the same and shall set forth the best mode 
contemplated by the inventor of carrying out his invention. 

2. Claim 12 is rejected under 35 U.S.C. 1 12, first paragraph, as failing to comply with the 
enablement requirement. The claim(s) contains subject matter which was not described in the 
specification in such a way as to enable one skilled in the art to which it pertains, or with which 
it is most nearly connected, to make and/or use the invention. Claim 12 limitations, "recording 
keystrokes while accessing the account in a duplicate log file; determining whether the duplicate 
log file is tampered with; deleting the duplicate log file responsive to a determination that the log 
file has not been tampered with; terminating the login and transmitting the duplicate file in 
response to determining that the log file is tampered with", are not disclosed in the specification 
to enable one skilled in the art to make or use the invention. On page 9 of specification, 
discloses the keystrokes are logged to a duplicate file. If the user attempts to tamper with the log 
file, the duplicate file is still available for managers to take action. The tampering of the log file 
is disclosed, but not of a duplicate log file. The duplicate log file is merely a duplicate file of the 
log file according to the specification. 

3. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

4. Claim 12 is rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite for 
failing to particularly point out and distinctly claim the subject matter which applicant regards as 
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the invention. Claim 12, contains new matter that is not described in the specification. Claim 12 
limitations, "recording keystrokes while accessing the account in a duplicate log file; 
determining whether the duplicate log file is tampered with; deleting the duplicate log file 
responsive to a determination that the log file has not been tampered with; terminating the login 
and transmitting the duplicate file in response to determining that the log file is tampered with", 
are not disclosed in the specification to enable one skilled in the art to make or use the invention. 
On page 9 of specification, discloses the keystrokes are logged to a duplicate file. If the user 
attempts to tamper with the log file, the duplicate file is still available for managers to take 
action. The tampering of the log file is disclosed, but not of a duplicate log file. The duplicate 
log file is merely a duplicate file of the log file according to the specification. The Applicant 
cannot amend the specification to contain these limitations. These limitations are required to be 
cancelled. 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. Claims 1-12 are rejected under 35 U.S.C. 103(a) as being unpatentable over Reiners et 
al(2004/0 148259) in view of Shaw(20040068559). 

7. As per claims 1,11, Reiners et al. discloses a method for effecting controlled access to a 
privileged account on a computer system[0020] logging into an account with a user id and an 
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account name[0034]; determining whether the account name is in a list of privileged account 
names and allowing access to the account if the account name is not in the privileged account 
list; determining whether the user id is in a list of user ids having permission to access privileged 
accounts and allowing access to the account if the user id is in the list of user ids having 
permission to access privileged accounts [01 09]; recording a reason for accessing the 
account[0020, 0021] ; notifying a manager of the privileged account of the login[0034]; 
terminating the login; and notifying the manager of the privileged account of the login 
termination[01 16]. Reiners does not disclose recording keystrokes in a log file while logged 
into the account. Shaw discloses recording keystrokes in a log file [0009, 0024]. It would have 
been obvious to one of ordinary skill in the art at the time of the invention to include Shaw's 
recording keystrokes in a log file, with Reiners method of providing access control to account 
holder's such as internet banking accounts, the motivation to include recording keystrokes in a 
log file is that recording keystrokes is a security measure for detecting unauthorized computer 
usage, by monitoring users Internet activities [0007 of Shaw]. This method of Shaw is an 
efficient security measure for ensuring that banking account of Reiners are monitored for illegal 
activity. 

8. As per claim 2, Shaw discloses determining whether the log file[0029-0030] is tampered 
with; and terminating the login in response to determining that the log file is tampered 
with[0009]. It would have been obvious to include the terminating of the log file of Shaw with 
Reiners, Shaw discloses the log file contains all internet activity of a user, the motivation to 
terminate the log file if tampering is detected, is that terminating the file based upon tampering is 
an efficient method of deleting the file from corruption. 
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9. Same Motivation as claim 2 above. As per claim 3, Shaw discloses denying write 
permission to the log file after the step of terminating the login[0009]. 

10. As per claim 4, Shaw discloses recording keystrokes while accessing the account in a 
duplicate log file[0009, 0024]. It would have been obvious to one of ordinary skill in the art at 
the time of the invention to include Shaw's recording keystrokes in a log file, with Reiners 
method of providing access control to account holder's such as internet banking accounts, the 
motivation to include recording keystrokes in a log file is that recording keystrokes is a security 
measure for detecting unauthorized computer usage, by monitoring users Internet activities [0007 
of Shaw]. This method of Shaw is an efficient security measure for ensuring that banking 
account of Reiners are monitored for illegal activity. 

11. As per claim 5, Shaw discloses determining whether the log file is tamped with; 
terminating the login and transmitting the duplicate file in response to determining that the log 
file is tampered with[0009, 0029-0030]. It would have been obvious to include the terminating 
of the log file of Shaw with Reiners, Shaw discloses the log file contains all internet activity of a 
user, the motivation to terminate the log file if tampering is detected, is that terminating the file 
based upon tampering is an efficient method of deleting the file from corruption. 

12. As per claim 6, Reiners discloses an account manager[0034]. Reiners does not disclose a 
log file. Shaw discloses a log file[see fig. 5 sheet 5]. It would have been obvious to one of 
ordinary skill in the art at the time of the invention to transmit the log file of Shaw to Reiners 
account manager, because the log file records all internet activity [0007], thus transmitting the log 
file to the account manager of Reiners insures that the account manager has a record of all 
internet activity of a user in a file. 
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13. As per claim 7, Reiners discloses entering a password in order to access the privileged 
account[0034]; determining whether the password associated with the user id matches the . 
entered password; and permitting access only if the password associated with the user id matches 
the entered password[0109]. 

14. As per claim 8, Reiners discloses notifying the manager of the privileged account if the 
login is not successful [01 43]. 

15. Same Motivation as claim 5 above. As per claim 9, Shaw discloses compressing the log 
file after terminating the login[0020, 0029-0030]. 

16. As per claim 10, Shaw discloses recording keystrokes while accessing the account in a 
duplicate log file; deleting the duplicate log file responsive to a determination that the log file has 
not been tampered with[0009, 0029-0030]. It would have been obvious to include the 
terminating of the log file of Shaw with Reiners, Shaw discloses the log file contains all internet 
activity of a user, the motivation to terminate the log file if tampering is detected, is that 
terminating the file based upon tampering is an efficient method of deleting the file from 
corruption. 

17. As per claim 12, recites limitations already address(see claim 1). Also, claim 12, Reiners 
discloses determining whether the log file is tampered with; terminating the login in response to 
determining that the log file is tampered with; denying write permission to the log file after the 
step of terminating the login in response to determining that the log file is tampered with; 
notifying the manager of the privileged account if the login if not successful via an email[0123, 
0166]; compressing the log file, is obvious because the by using compression the file will 
conserve space. 
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Response to Amendment 

18. A non-final rejection was mailed out on 1/1 1/07, rejecting claims 1-10 Reiners in view of 
Shaw. The Applicant has submitted a reply to the non-final action on 4/9/07. In Applicant's 
reply claims 1 and 7 have been amended, and claims 11-12 have been added. Therefore, claims 
1-12 are pending. 

19. The Applicant states that Reiners does not disclose receiving a login into an account with 
a user id and an account name. The Examiner disagrees with the Applicant. Reiners discloses 
the system may include an authentication facility for authenticating the identity or capacity of the 
bank account holder before permitting the account holder access to the account holder 
interface [0020]. The authentication facility requires the account holder to enter a username and 
password, thereby to login to the account administrative server[0034]. A specific account, which 
includes an account name is linked to a username and password, such that when a user logs in to 
the account administrative server to access the users account, that specific account is linked to a 
specific username and password[0102, 0103]. 

20. The Applicant states that Reiners does not disclose prompting for a reason for accessing 
the account nor recording a reason for accessing the account. The Examiner disagrees with the 
Applicant. Reiners discloses the authentication process thorough the account administration 
server includes the account holder logging onto the Internet, from the computer. The account 
holder then accesses a website or webpage hosted by the web server of the account 
administrative server, and requests the account details of the online bank account[0109]. Thus, 
the reason for accessing the account, is to get the account details of the online bank account. 
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21. Reiners does disclose recording a reason for accessing the account, because the account 
holder interface may include a transaction notes input facility, for allowing an account holder to 
input notes. The notes may be in relation to a transaction. Thus, the transactions may be 
documented. These transaction notes may be recorded as part of the transaction record or 
statement[0022]. 

Final Rejection 

22. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jenise E. Jackson whose telephone number is (571) 272-3791. 
The examiner can normally be reached on M-Th (6:00 a.m. - 3:30 p.m.) alternate Friday's. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




